CVE-2024-5154

Publication date

2024-06-12 08:51:43

Family

redhat

State

PUBLISHED

Description

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.